Page tree
Skip to end of metadata
Go to start of metadata

This article describes how Nexus Hybrid Access Gateway is set up so that end users will be allowed to provision new profiles for Nexus Personal Mobile themselves.

How to enable self-service for Personal Mobile: 

  • If you use Personal Mobile push, then follow the instructions below. 
  • If you use Personal Mobile OTP, then self-service is enabled the same way as for any other OATH-compliant mobile app. See "Enable OATH-compliant app self service registration" in Set up an OATH-compliant mobile app as authentication method.

Expand/Collapse All

Prerequisites

 Prerequisites

Step-by-step instruction

 Log in to Hybrid Access Gateway administration interface
  1. Log in to the Hybrid Access Gateway administration interface with your admin user.
 Self-service settings

The self-service provisioning is managed by displaying a QR code, either directly in a browser or in an email. Notifications by SMS or email can be sent.

To enable and customize self-service provisioning:

  1. In the Hybrid Access Gateway administration interface, go to Manage Accounts and Storage.
  2. Click Self Service > Personal Mobile Provisioning.
  3. Check Enable Personal Mobile Self Service Provisioning.
  4. Select one or more notification channels:

    1. To send an email with a QR code, select Enable notification by mail. If needed, change Email subject or Email message under Notification Message Customization.
      In this case, an email notification channel must be set up. See Set up email or sms notification channel.

    2. To send an SMS with a link to the QR code, select Enable notification by sms. If needed, change SMS message under Notification Message Customization.
      In this case, an SMS notification channel must be set up. See Set up email or sms notification channel.

    3. To generate a QR code directly in the browser, select Enable QR code generation.

  5. Click Save.
 Configure access rules for provisioning or make the page visible in the portal

To do self-provisioning, the user needs to authenticate with at least one other method. By adding an access rule to the provisioning page you can specify which methods that are allowed to prove the users identity.

  1. In the Hybrid Access Gateway administration interface, go to Manage Resource Access.
  2. Expand the Web Resource Access Point and select wa/personal/provisioning.html.
  3. Click Edit Resource Path...
  4. Make the required settings, for example by adding an access rule. For more information, click the ?-sign.
  5. Click Save.

This article is valid from Hybrid Access Gateway 5.13.

Related information